Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/958f499ac41f5f1d49e25d2caab8318b95a1c691.mft
File:                     958f499ac41f5f1d49e25d2caab8318b95a1c691.mft (raw, json)
Hash identifier:          cb9d00VVure2shuvX5cLtC2/0RNfKblFGJrOpLF0Smc=
Subject key identifier:   21:13:83:9A:37:F5:FC:D7:9C:51:C9:F3:9A:22:6D:DB:9B:4D:21:3B
Authority key identifier: F5:FB:70:79:25:47:2A:00:97:0F:69:1D:54:DB:7B:D8:EA:5E:7D:77
Certificate issuer:       /CN=958f499ac41f5f1d49e25d2caab8318b95a1c691
Certificate serial:       260640
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/958f499ac41f5f1d49e25d2caab8318b95a1c691.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/958f499ac41f5f1d49e25d2caab8318b95a1c691.mft
Manifest number:          0DE6
Signing time:             Fri 29 Mar 2024 06:20:23 +0000
Manifest this update:     Fri 29 Mar 2024 05:20:07 +0000
Manifest next update:     Mon 01 Apr 2024 07:33:07 +0000
Files and hashes:         1: 958f499ac41f5f1d49e25d2caab8318b95a1c691.crl (hash: TjD1UfGqfok5jANnsJkZcxTo2kBcdJF2cKt6i2QidEc=)
                          2: 9fc4ad5ba19c40e5d84a921b6256e8739d2bd5ac.roa (hash: n9WbVfOITWE++kJvGPCQSDWZMl5nB2sfZoVDMfo9gxU=)
                          3: eb2ef20d6c99f35020c66900893f8f05be952bb7.roa (hash: K2fZEPPNBTW8FkNLsti14QwIaftnrWMDKz6pjx2Q3F0=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/958f499ac41f5f1d49e25d2caab8318b95a1c691.crl
                          rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/958f499ac41f5f1d49e25d2caab8318b95a1c691.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/958f499ac41f5f1d49e25d2caab8318b95a1c691.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2491968 (0x260640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958f499ac41f5f1d49e25d2caab8318b95a1c691
        Validity
            Not Before: Mar 29 05:20:07 2024 GMT
            Not After : Apr  1 07:33:07 2024 GMT
        Subject: CN=8025ccbd858e94d31402ac668f16d98b9617a9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1f:af:62:1d:89:97:cb:4d:2d:9e:c1:74:74:
                    65:3c:e1:25:74:5f:a5:e4:7a:19:f2:95:12:20:6f:
                    5b:49:ab:99:88:19:c9:9b:7a:e9:cd:3f:ae:63:6a:
                    f1:b8:f8:c0:ab:07:ce:00:75:2c:ba:c7:64:f1:be:
                    dc:39:51:87:9b:4f:93:83:65:7a:dc:6c:a3:60:ce:
                    aa:27:6d:65:46:41:9b:6a:ef:8f:da:4a:44:9e:34:
                    bb:32:bf:f4:51:ba:fd:cf:5f:ac:45:6c:9f:0d:aa:
                    3f:e1:90:77:47:df:97:f0:00:31:38:11:83:c1:16:
                    2b:bb:a5:f3:d8:43:1e:23:d8:b8:b9:bb:7a:d8:ea:
                    8b:7f:60:68:43:ee:c9:c8:6c:b8:7b:da:b2:da:da:
                    51:9a:c6:60:8d:f4:4b:0a:8e:e7:7c:9e:86:a9:2c:
                    9b:28:b7:a1:ae:55:f5:83:7d:3b:c6:6d:69:9d:f3:
                    d9:bb:d8:37:fb:29:d9:e5:aa:65:18:9c:cb:c5:b2:
                    46:59:90:58:9b:4a:44:52:d5:c1:4d:e7:9b:31:37:
                    26:fc:8e:f8:0d:8e:c6:04:c4:94:66:00:db:8c:62:
                    84:8e:ff:9e:84:29:e3:83:9a:9a:e0:a6:4d:8f:96:
                    78:33:85:1e:92:b2:4e:78:1b:87:c0:f5:71:d8:62:
                    03:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:13:83:9A:37:F5:FC:D7:9C:51:C9:F3:9A:22:6D:DB:9B:4D:21:3B
            X509v3 Authority Key Identifier:
                keyid:F5:FB:70:79:25:47:2A:00:97:0F:69:1D:54:DB:7B:D8:EA:5E:7D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/958f499ac41f5f1d49e25d2caab8318b95a1c691.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/958f499ac41f5f1d49e25d2caab8318b95a1c691.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/958f499ac41f5f1d49e25d2caab8318b95a1c691.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ad:0d:b3:d3:cf:9e:98:73:31:2d:57:5f:d2:35:59:6b:14:
         bc:cd:85:72:29:04:54:fd:4b:5d:cc:11:09:1f:f7:39:a7:34:
         c9:cf:4c:ef:cb:79:c1:38:58:2f:4a:96:29:64:d8:cf:20:45:
         f3:00:ee:7f:c8:1a:3e:65:21:1c:a4:5f:5d:92:e4:cc:bd:92:
         0d:20:e2:bb:49:14:08:27:8e:b7:4a:f4:50:87:46:bb:f7:a4:
         1e:d6:71:63:ef:ef:2e:a6:86:08:d6:b2:80:01:5f:f1:65:e3:
         a0:06:58:69:83:4f:69:79:8e:fa:ba:e8:f2:3f:b8:f0:27:f1:
         fc:4f:99:45:4f:12:c7:13:82:84:1c:81:b2:e8:c2:2c:18:1a:
         72:1e:df:43:f2:61:b6:77:94:09:4d:f1:b6:30:ac:4e:d7:7d:
         f5:50:f7:12:f9:ce:9b:9e:1a:a1:a3:0a:82:8d:51:f3:3b:93:
         ed:5d:86:b2:49:29:28:dc:29:3b:36:c6:05:5f:3b:26:c8:87:
         f6:91:cd:55:3f:47:f8:d5:a3:e8:81:cf:f7:d3:28:e1:c2:82:
         05:ef:45:77:f8:57:20:4d:59:05:f2:62:8c:89:54:ce:10:bc:
         2e:70:dc:a3:f6:56:98:40:96:70:1c:3f:e8:02:62:42:a5:67:
         83:0c:22:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 07:31:01 2024 by rpki-client on console-fra.rpki-client.org